CVE-2026-30457: Code Injection

Published Mar 26, 2026

Updated

An issue in the /parser/dwoo component of Daylight Studio FuelCMS v1.5.2 allows attackers to execute arbitrary code via crafted PHP code.

Affected Software

3 affected components

Daylight Studio FuelCMS=1.5.2

TheDayLightStudio Dwoo=1.1.0

TheDayLightStudio Fuel CMS=1.5.2

Mar 26, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·07:16 PM

DescriptionSeverityWeaknessAffected Software

CVE-2026-30457 has a critical severity score of 9.8 according to CVSS 3.1.

To fix CVE-2026-30457, you should update Daylight Studio FuelCMS to the latest version that addresses this vulnerability.

CVE-2026-30457 is classified as a code injection vulnerability, allowing attackers to execute arbitrary code.

CVE-2026-30457 affects the /parser/dwoo component of Daylight Studio FuelCMS v1.5.2.

Yes, CVE-2026-30457 can lead to significant data compromise due to its capabilities for arbitrary code execution.